Security Engineer, Platform

Resend; United States; Remote; USD 140,000 - 160,000; Full time

Benefits offered by this job

Remote work

Flexible schedule

Modern tech stack

Job summary

Resend is building the modern email sending platform for developers. We’re looking for a security-focused engineer to join the Platform Squad and own security foundations across the internal platform and services.

You’ll secure production infrastructure, read and write deployment code, design secure defaults, and shape incident response and access controls while working 100% remotely with flexible schedules in the Americas or Europe time zones.

Qualifications

• Experience securing production infrastructure and cloud environments.
• Able to read and write code across applications, infra, and deployments.
• Familiar with IAM, auditing, logging, incident response, and secure pipelines.
• Experience with email infrastructure or security for SaaS platforms is a plus.

Responsibilities

• Build and strengthen security foundations of Resend’s platform, including keys, secrets, permissions, and audit logs.
• Design secure defaults for services, workers, queues, databases, and deployment pipelines.
• Improve detection and response for suspicious access, leaked credentials, and sensitive events.
• Review and update processes/pipelines to ensure security is built-in, not bolt-on.
• Raise the security bar across the organization.

Skills

Security engineering

Cloud security

DevSecOps

IAM & auth

Threat detection

Open source security

Tools

AWS

Terraform

Kubernetes

Cloudflare

Job description

Resend is growing fast, and there are now over 4 million developers using it. As the Platform Squad, we are responsible for the internal platform and reliability foundations that let Resend teams build, deploy, observe, and operate services safely.

This role is fully remote based in Americas or European timezones, with some expected travel for team offsites, conferences, meetups, and more.

Read more about how we work, how we hire, and what we value here

In this role, you will…

• Build and improve the security foundations of Resend’s platform, including API keys, service permissions, secrets management, tenant isolation, audit logs, and internal access controls

• Help design secure defaults for new services, workers, queues, databases, internal tools, and deployment pipelines

• Improve detection and response for suspicious access, leaked credentials, abnormal sending behavior, privilege changes, and sensitive system events

• Review and update our processes/pipelines so that security is “built-in”, not “bolt-on”

• Raise the security bar

You will be a great fit if you...

• Have experience securing production infrastructure, cloud environments, APIs, developer platforms, or multi-tenant SaaS products

• Can write code and are comfortable reading application, infrastructure, and deployment code

• Understand authentication, authorization, secrets, IAM, logging, audit trails, incident response, and secure deployment pipelines

• Independently prioritize and drive your day-to-day as the first dedicated security hire

• Prefer practical improvements over heavy processes

• Are low-ego, direct, curious, and willing to learn from others

• Care about developer experience and believe security should be easy to adopt

You will be an exceptional fit if you also...

• Have experience with email infrastructure, transactional email, sender reputation, domain verification, SPF, DKIM, DMARC, webhooks, or abuse prevention

• Have secured cloud infrastructure using tools like AWS, Terraform, Kubernetes, Cloudflare, or similar systems

• Have experience with open source security, GitHub organization hardening, package publishing, dependency review, or supply-chain security

• Have helped a company prepare for SOC 2, ISO 27001, GDPR, enterprise security reviews, or customer trust processes without turning engineering into a compliance machine

• Have built security observability, alerting, detection pipelines, or incident response workflows

• Have worked closely with Trust & Safety, anti-abuse, fraud, or platform integrity teams

• Have experience designing security systems for high-scale developer products

What it means to join the team:

• Autonomy to "just ship it"

• 100% remote team with flexible working schedules

• Modern tech stack (Next.js, Raycast, Notion, etc.)

• Honest and low-ego team

• Ownership of problems and solutions

• Comp: $140,000 - $160,000 USD, commensurate with experience

About Resend

We are building the modern email sending platform for developers. We care deeply about quality, craft, and the developer experience.

Our fully remote team of 50 spans 15 countries and counting. We're backed by a16z, Y Combinator, and others. Meet the humans